$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft File: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft (raw, json) Hash identifier: iqF5pb6DGBBswmgkLAbCalwCl9/TvCKD1m2d+f6495w= Subject key identifier: 3B:98:05:C2:B7:18:F1:91:ED:C5:BD:24:F6:64:D5:C3:EA:A8:93:7C Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA Certificate issuer: /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Certificate serial: 4856F4E544DE6D41921C80CFCEBA57B19ADE89DA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:18:10 +0000 Manifest this update: Mon 21 Sep 2026 05:13:10 +0000 Manifest next update: Tue 22 Sep 2026 08:47:10 +0000 Files and hashes: 1: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=) 2: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 9B0hR+Pez6aDifr/IcABnOPS8TwFxYRNnAz9kyjkV30=) 3: 1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl (hash: H4MaFYIFRa70mibY1yjgrZT85h7opvCIrqCEMzxkDH0=) 4: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: gyZX33w8iv6JPdXzxu4ePA4ThdjmRRpGDDOAQqofdN4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:56:f4:e5:44:de:6d:41:92:1c:80:cf:ce:ba:57:b1:9a:de:89:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA Validity Not Before: Sep 21 05:13:10 2026 GMT Not After : Sep 22 08:47:10 2026 GMT Subject: CN=3B9805C2B718F191EDC5BD24F664D5C3EAA8937C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:2c:d8:20:2c:cf:bd:c6:69:57:f5:2d:7d: 6a:50:e3:ea:65:3f:e8:a4:e2:d2:2a:6f:bb:a1:24: 2b:6d:3f:94:16:31:8f:c5:bb:fb:d4:f8:90:46:4e: 66:ec:f9:36:e9:2b:f5:ca:97:af:7f:ac:2d:8e:81: 9d:c1:ad:ca:c9:b9:52:ee:04:51:5c:36:29:00:5f: 22:87:6f:ef:fe:a3:b7:a0:00:91:e5:fc:50:43:9d: 99:cf:b0:42:21:dc:4d:3c:fa:b7:af:8b:01:73:38: 2e:e3:e4:92:dc:ef:9d:ea:b2:ae:a0:c0:22:bd:32: 60:3f:1e:7d:dc:5f:10:6a:f6:4c:e5:c2:ad:c3:c8: 89:e6:cc:c9:ac:7f:8b:80:33:c3:00:f0:29:d9:e9: 36:8f:c8:35:d0:0d:62:85:0f:60:12:e1:b6:1d:ae: 4e:1d:c3:86:36:7c:45:1d:f3:ab:fb:b8:c0:ee:c2: c6:76:bf:21:ee:ae:fd:a8:0e:52:32:a3:17:0d:c2: 78:4b:7e:5b:7f:1d:02:8a:66:09:29:0a:7c:87:e7: 4a:98:09:f2:d4:52:2a:fc:7b:7a:a8:f8:3e:80:ec: 14:59:fa:11:75:17:2b:df:85:98:a6:fb:bb:49:f3: 78:25:03:db:6a:80:e0:42:9f:92:48:2a:fa:26:43: e4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:05:C2:B7:18:F1:91:ED:C5:BD:24:F6:64:D5:C3:EA:A8:93:7C X509v3 Authority Key Identifier: keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:95:78:e7:2d:7b:29:40:bc:ef:5a:1c:15:44:61:b0:ea:19: 38:3e:03:6b:85:97:8c:c2:e4:c2:10:dc:50:e1:06:f1:34:8b: e3:76:c2:8b:14:51:70:0d:25:50:d8:b6:7d:be:a8:30:1c:35: 6b:cc:79:ca:56:85:77:4d:cf:b9:2d:8f:8b:b5:ec:f4:8b:fa: 0c:4a:9a:53:ff:ad:0c:6e:20:6a:c3:08:db:39:b2:05:5e:59: c7:9f:13:7b:64:5e:d5:c0:19:66:77:7b:80:87:a5:a8:67:20: 4c:23:ca:db:ed:cd:fb:1b:a6:bd:2f:a4:cf:1e:6b:8c:f9:7b: 12:8c:a3:6b:db:a7:75:bc:59:20:9e:26:3e:dd:a3:0b:1d:db: 7c:b9:8e:f3:a4:0b:57:4d:40:20:37:32:0e:c9:9f:de:11:24: a8:b8:24:a0:a8:43:38:0e:d2:a1:3d:fb:c1:13:14:24:48:5f: e9:2d:ed:a7:9f:28:4c:2f:8f:57:94:6e:f8:99:1a:fa:2d:30: 0f:cf:81:ac:95:52:6c:3a:07:c4:79:5d:91:3f:fa:41:90:d0: ad:92:d3:0e:bf:54:9d:fb:89:d9:e6:92:06:bc:4e:17:3f:7a: 81:44:61:00:f0:e0:bc:c0:12:57:40:71:5f:51:88:86:3e:20: 45:e7:a9:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFb05UTebUGSHIDPzrpXsZreidowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1 MDg2MDFCQTAeFw0yNjA5MjEwNTEzMTBaFw0yNjA5MjIwODQ3MTBaMDMxMTAvBgNV BAMTKDNCOTgwNUMyQjcxOEYxOTFFREM1QkQyNEY2NjRENUMzRUFBODkzN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1syzYICzPvcZpV/UtfWpQ4+pl P+ik4tIqb7uhJCttP5QWMY/Fu/vU+JBGTmbs+TbpK/XKl69/rC2OgZ3BrcrJuVLu BFFcNikAXyKHb+/+o7egAJHl/FBDnZnPsEIh3E08+reviwFzOC7j5JLc753qsq6g wCK9MmA/Hn3cXxBq9kzlwq3DyInmzMmsf4uAM8MA8CnZ6TaPyDXQDWKFD2AS4bYd rk4dw4Y2fEUd86v7uMDuwsZ2vyHurv2oDlIyoxcNwnhLflt/HQKKZgkpCnyH50qY CfLUUir8e3qo+D6A7BRZ+hF1FyvfhZim+7tJ83glA9tqgOBCn5JIKvomQ+QbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO5gFwrcY8ZHtxb0k9mTVw+qok3wwHwYDVR0j BBgwFoAUHu/3DkwqYMfOmdzVpxnhIVCGAbowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2Q3MzgzMTQtYTk3NS00ZmQxLTliYzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0 QzJBNjBDN0NFOTlEQ0Q1QTcxOUUxMjE1MDg2MDFCQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xRUVGRjcwRTRDMkE2MEM3Q0U5OURDRDVBNzE5RTEyMTUwODYw MUJBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvMUVFRkY3MEU0QzJBNjBDN0NFOTlEQ0Q1QTcxOUUx MjE1MDg2MDFCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWVeOcteylAvO9aHBVEYbDqGTg+A2uFl4zC 5MIQ3FDhBvE0i+N2wosUUXANJVDYtn2+qDAcNWvMecpWhXdNz7ktj4u17PSL+gxK mlP/rQxuIGrDCNs5sgVeWcefE3tkXtXAGWZ3e4CHpahnIEwjytvtzfsbpr0vpM8e a4z5exKMo2vbp3W8WSCeJj7dowsd23y5jvOkC1dNQCA3Mg7Jn94RJKi4JKCoQzgO 0qE9+8ETFCRIX+kt7aefKEwvj1eUbviZGvotMA/PgayVUmw6B8R5XZE/+kGQ0K2S 0w6/VJ37idnmkga8Thc/eoFEYQDw4LzAEldAcV9RiIY+IEXnqWs= -----END CERTIFICATE-----Generated at Mon Sep 21 19:45:43 2026 by rpki-client